How to enable Secure Boot on Windows 11

• Check Secure Boot on Windows 11
• Enable Secure Boot on Windows 11
• Disable Secure Boot on Windows 11

On Windows 11, you can enable Secure Boot to enhance the security of the boot process of your computer, and in this guide, I’ll explain the steps to complete this configuration.

Although Microsoft recommends using Secure Boot on Windows 11, it’s not a requirement to run the operating system. As a result, the feature may be enabled or disabled on your computer.

What’s Secure Boot?

Secure Boot is a security feature available in the Unified Extensible Firmware Interface (UEFI) firmware that prevents unauthorized modifications to critical system files during startup. As a result, it ensures that a device boots using only software trusted by the manufacturer.

It establishes a “root of trust” during the computer startup process. It accomplishes this by checking the digital signature of the bootloader, operating system, and UEFI drivers before they are allowed to run on the device.

In short, Secure Boot helps protect against low-level malware, such as bootkits and rootkits, that can infect the boot process and gain control of your system before Windows 11 and your antivirus software even load.

In rare cases, enabling Secure Boot might interfere with older hardware or non-Windows operating systems. You might need to disable it temporarily in such scenarios. However, for optimal security with Windows 11, it’s generally recommended to keep it enabled.

In this guide, I will teach you the steps to check and enable (or disable) Secure Boot on Windows 11.

Check Secure Boot on Windows 11

To determine whether Secure Boot is enabled on the computer, use these steps:

1. Open Start.

2. Search for System Information and click the top result to open the app.

3. Click on System Summary on the left pane.

4. Check the “Secure Boot State” information and confirm the feature is turned “On.” (If not, you need to enable the option manually.)

   

Once you complete the steps, you can continue with the Windows 11 installation if the security feature is enabled. Otherwise, you must follow the steps below to enable it inside the UEFI firmware.

Enable Secure Boot on Windows 11

To enable Secure Boot in the BIOS firmware, use these steps:

1. Open Settings.

2. Click on System.

3. Click the Recovery page.

4. Click the Restart now button under the “Advanced startup” section.

   

5. Click the Restart now button one more time.

6. Click on Troubleshoot.

7. Click on Advanced options.

8. Click the “UEFI Firmware settings” option.

   

9. Click the Restart button.

10. Open the advanced, security, or boot settings page, depending on the motherboard.

11. Select the “Secure Boot” option and choose the Enabled option.

Once you complete the steps, Secure Boot will be enabled on the computer.

Disable Secure Boot on Windows 11

To disable Secure Boot on Windows 11, use these steps:

1. Open Settings.

2. Click on System.

3. Click the Recovery page.

4. Click the Restart now button under the “Advanced startup” section.

5. Click on Troubleshoot.

6. Click on Advanced options.

7. Click the “UEFI Firmware settings” option.

   

8. Click the Restart button.

9. Open the advanced, security, or boot settings page, depending on the motherboard.

10. Select the “Secure Boot” option and choose the Disabled option.

After you complete the steps, Secure Boot will be disabled on the device.